nerdexam
Splunk

SPLK-1003 · Question #69

Which of the following is a benefit of distributed search?

The correct answer is B. Peers run search in parallel.. The primary benefit of distributed search is parallelism: the search head dispatches a search simultaneously to all indexer peers, each of which searches its local data at the same time. Results are then streamed back to the search head, which merges and presents them. This drama

Distributed Search

Question

Which of the following is a benefit of distributed search?

Options

  • APeers run search in sequence.
  • BPeers run search in parallel.
  • CResilience from indexer failure.
  • DResilience from search head failure.

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    93% (25)
  • C
    4% (1)

Explanation

The primary benefit of distributed search is parallelism: the search head dispatches a search simultaneously to all indexer peers, each of which searches its local data at the same time. Results are then streamed back to the search head, which merges and presents them. This dramatically reduces search time compared to querying a single indexer sequentially. Resilience from indexer failure (C) and search head failure (D) are benefits of indexer clustering and search head clustering respectively, not of distributed search itself.

Topics

#Distributed Search#Parallel Processing#Search Performance#Indexers

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice